Bug 24598 - nodejs-handlebars new security issue fixed upstream in 4.0.13
Summary: nodejs-handlebars new security issue fixed upstream in 4.0.13
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: Cauldron
Hardware: All Linux
Priority: Normal major
Target Milestone: ---
Assignee: Stig-Ørjan Smelror
QA Contact: Sec team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-03-30 18:39 CET by David Walser
Modified: 2019-06-23 19:18 CEST (History)
0 users

See Also:
Source RPM: nodejs-handlebars-4.0.11-3.mga7.src.rpm
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description David Walser 2019-03-30 18:39:37 CET 
Fedora has issued an advisory on March 29:
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/FPTUTMZHMXSZYOT3UXEIOJO2BBGRZJGC/

The issue is fixed upstream in 4.0.13.
Comment 1 David Walser 2019-06-23 19:18:49 CEST 
We have 4.0.13 in Cauldron.

Resolution: (none) => FIXED
Status: NEW => RESOLVED
Note You need to log in before you can comment on or make changes to this bug.